Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f64ffea-e706-4e90-bb07-255a657996ab/f0a155c0-6bc3-3834-882d-5fc717f28856.roa
File:                     f0a155c0-6bc3-3834-882d-5fc717f28856.roa (raw, json)
Hash identifier:          8aun6LmvGiXv7hYftkZl66DmU2HtZG4F3/kuC/HuyDo=
Subject key identifier:   3C:52:15:35:C5:F0:97:98:7F:77:D1:12:B3:E7:DF:A8:EA:DF:2E:0D
Certificate issuer:       /CN=7f64ffea-e706-4e90-bb07-255a657996ab
Certificate serial:       010D0C9F4328584EA798EF860839A89B082F5380
Authority key identifier: 40:79:0F:CE:3D:01:3B:59:26:A1:2B:72:10:2B:A0:EA:A1:CF:9D:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f64ffea-e706-4e90-bb07-255a657996ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f64ffea-e706-4e90-bb07-255a657996ab/f0a155c0-6bc3-3834-882d-5fc717f28856.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     40272
IP address blocks:        163.123.189.0/24 maxlen: 24
                          2620:b1:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f64ffea-e706-4e90-bb07-255a657996ab/7f64ffea-e706-4e90-bb07-255a657996ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f64ffea-e706-4e90-bb07-255a657996ab/7f64ffea-e706-4e90-bb07-255a657996ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f64ffea-e706-4e90-bb07-255a657996ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:ef:86:08:39:a8:9b:08:2f:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f64ffea-e706-4e90-bb07-255a657996ab
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2d7af717-574b-4064-92cd-cfb29bb9b695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5d:35:b7:38:79:eb:4b:62:70:67:90:7e:b7:
                    3f:90:05:c5:ea:02:3f:b7:5e:18:89:94:49:a4:ae:
                    a9:b4:29:d2:09:86:9d:65:5e:18:0a:34:87:de:81:
                    35:76:c0:17:9d:ad:9c:5f:d1:16:e3:25:42:a6:35:
                    54:75:2c:ad:9a:59:09:18:34:26:35:5a:d2:0f:ae:
                    56:d1:59:0f:85:69:9f:12:1b:12:db:1b:cc:45:26:
                    f4:0a:0e:ec:78:65:3d:e1:46:9b:0c:41:dc:cc:9c:
                    8d:56:8f:bc:5c:f8:fc:79:9e:9e:d9:bf:02:3c:2f:
                    62:6e:07:4e:1b:b9:be:81:b1:2e:78:87:1a:3a:84:
                    59:2c:e3:0a:ab:29:81:9b:be:76:0f:4f:5d:70:b9:
                    e7:fa:ce:d8:33:13:4e:7f:2b:5d:c6:3b:27:fe:9a:
                    54:6c:a1:6b:c1:85:7c:09:6d:a2:1c:8b:91:69:67:
                    3d:70:a1:60:ab:83:bf:3e:e3:5a:fb:fe:76:c8:17:
                    ce:3a:4e:f1:dc:8d:8c:6c:9a:f6:52:d0:95:12:7a:
                    62:90:95:49:8a:7f:40:0b:6a:6e:63:5d:0e:d8:76:
                    e4:b3:8d:aa:cf:69:e6:bb:78:97:ed:5d:20:ad:a6:
                    fd:06:a6:73:ea:e1:ea:e3:54:97:69:4f:65:60:60:
                    b9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:52:15:35:C5:F0:97:98:7F:77:D1:12:B3:E7:DF:A8:EA:DF:2E:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f64ffea-e706-4e90-bb07-255a657996ab/f0a155c0-6bc3-3834-882d-5fc717f28856.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f64ffea-e706-4e90-bb07-255a657996ab/7f64ffea-e706-4e90-bb07-255a657996ab.crl

            X509v3 Authority Key Identifier:
                keyid:40:79:0F:CE:3D:01:3B:59:26:A1:2B:72:10:2B:A0:EA:A1:CF:9D:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f64ffea-e706-4e90-bb07-255a657996ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.123.189.0/24
                IPv6:
                  2620:b1:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:a2:9d:e1:3f:ea:cd:dc:df:5c:a1:46:a0:d1:b1:f4:12:af:
         dd:1b:da:21:3c:90:41:ce:90:b7:aa:c5:ff:63:cf:81:5a:81:
         57:b2:24:22:49:0d:ed:9c:e4:d9:06:18:38:f7:4e:15:6e:0f:
         49:2d:e8:48:4f:6e:bd:bd:e5:7b:4c:2d:42:cf:7a:5f:72:54:
         27:6f:f7:12:c6:fa:78:8f:95:e2:d4:2d:ff:ec:fb:4e:3c:de:
         11:82:66:56:93:1d:83:a8:13:8d:71:05:16:da:5a:d6:f7:e6:
         ff:71:3c:de:8f:69:a9:6c:95:26:32:21:cd:34:82:91:e6:2f:
         00:29:84:8f:82:26:9a:23:b2:dd:31:ee:85:9f:35:39:73:fe:
         e7:5d:e6:0e:24:5a:e9:19:68:b4:7d:40:35:84:4e:17:00:6e:
         4c:e8:4b:61:e2:4d:55:0f:a7:7b:79:ce:de:74:9d:42:7e:ad:
         03:5a:7b:22:1d:90:22:7b:6b:12:57:fd:36:94:f6:20:e5:8e:
         ae:5b:d8:1a:70:51:44:f2:e0:6e:12:8b:62:a7:0c:f6:90:9b:
         e2:4b:c4:a2:c9:1a:71:db:bc:18:6b:39:c9:af:25:1b:02:72:
         68:df:f5:c2:76:97:51:b9:0d:e9:a3:c9:af:84:a8:43:aa:c1:
         f5:1f:9d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 21:57:14 2026 by rpki-client